Table of Contents
Advertisement
Quick Links
Advertisement
Table of Contents
Related Manuals for FARONICS DEEP FREEZE ENTERPRISE 6
Summary of Contents for FARONICS DEEP FREEZE ENTERPRISE 6
- Page 2 This page intentionally left blank...
- Page 3 Last modified: January, 2007 © 2007 Faronics Corporation. All rights reserved. Deep Freeze, Faronics, Faronics Anti-Executable, Faronics System Profiler, FreezeX, and WINSelect are trademarks and/or registered trademarks of Faronics Corporation. All other company and product names are trademarks of their respective owners.
- Page 4 This page intentionally left blank...
-
Page 5: Table Of Contents
Contents Deep Freeze Overview ............................7 About Deep Freeze .................................7 System Requirements ..............................7 Deep Freeze Enterprise Components ..........................7 Deep Freeze Configuration Administrator .......................8 Installing the Configuration Administrator ........................8 Initializing the Customization Code ..........................8 Re-Initializing the Customization Code ........................9 Using the Configuration Administrator ........................10 Welcome Tab .................................10 Toolbar ..................................10 File Menu ..................................11... - Page 6 Installing Using Imaging .............................42 Target Install ..................................42 Managing Deep Freeze Workstations ......................43 Workstation Logon ...............................43 Boot Control ..................................43 Network ..................................44 Clone ....................................44 One Time Passwords ..............................44 ThawSpace ..................................45 Permanent Software Installations, Changes, or Removals ..................45 Deep Freeze Command Line Control (DFC.EXE) ..................46 DFC Return Values ...............................47 Batch File Example ...............................47 Update Mode .................................48...
-
Page 7: Deep Freeze Overview
Deep Freeze Overview About Deep Freeze With over five million installations, Deep Freeze has a proven track record of non-restrictive, complete Windows protection. Deep Freeze provides network administrators with a simple and 100% successful method of maintaining desktop systems and reduces software technical support to an absolute minimum. -
Page 8: Deep Freeze Configuration Administrator
Open the Configuration Administrator by selecting the following path from the Start menu: Start > All Programs > Faronics > Deep Freeze 6 Enterprise > Deep Freeze Administrator The Deep Freeze Enterprise Customization window appears the first time the Configuration... -
Page 9: Re-Initializing The Customization Code
Multiple Deep Freeze administrators controlling the same group of workstations should use a matching Customization Code. After entering a customization code, the following dialog appears: The Customization Code must be recorded and guarded with care. Faronics is unable to recover a lost or forgotten Customization Code! Re-Initializing the Customization Code If another administrator wants to create installation files with the same Configuration Administrator using a different Customization Code, the DFInit6.exe program should be run. -
Page 10: Using The Configuration Administrator
There are four main tabs for accessing the various options available: Welcome, Configuration, One Time Passwords, and Create Programs. Welcome Tab The Welcome tab provides contact information for Faronics, including a link to the company and Technical Support Web sites. Toolbar The Toolbar is available at the top of every tab in the Configuration Administrator. -
Page 11: File Menu
File Menu The File Menu contains the same options as those available on the Toolbar, with the additions of Password Protection, Create Server Console, Create Server Manager, Create Workstation Seed, and Create Workstation Install Program. Password Protection Password Protection offers an optional layer of security for the administrator. To password protect access to the Configuration Administrator, complete the following steps: Check the Protect with password box. -
Page 12: Configuration Tab
Configuration Tab The Configuration tab has six sub-tabs used to configure various options. After all the desired configuration options have been selected, a customized workstation installation program file is ready to be created. This program file is used to install a pre-configured version of Deep Freeze on workstations. -
Page 13: Drives
Drives The Drives tab is used to select which drives are to be Frozen (protected by Deep Freeze) or Thawed (unprotected), and to create a ThawSpace—a virtual partition on a Frozen drive where data can be saved permanently. Frozen Drives By default, all drives are Frozen. - Page 14 1. In the ThawSpace pane, check Create. 2. The ThawSpace Drive option is used to select the drive letter assigned to the ThawSpace. The default letter is T:, but it can be changed to any available letter. The next available letter is used if the selected drive letter already exists on a workstation when Deep Freeze is installed.
-
Page 15: Restart/Shutdown
Restart/Shutdown The Restart/Shutdown tab is used to schedule restarts or shutdowns. Restart/Shutdown Schedule To create a Restart/Shutdown schedule, complete the following steps: 1. In the Restart/Shutdown Schedule pane, check the days of the week the schedule will occur on. Optional: Check Set One Change All so all changes made apply to all schedules. 2. -
Page 16: Maintenance
Maintenance The Maintenance tab is used to schedule a time when Deep Freeze is Thawed and when upgrades, new installations, maintenance, or any other permanent changes can be made. To create and configure a Maintenance Schedule, complete the following steps: Check the box beside each day of the week when the Scheduled Maintenance will happen. - Page 17 From the Run drop-down list, choose an action to occur during the maintenance period. Choose Batch file to allow workstations to run a Batch file automatically during the maintenance period. A custom Batch file can be entered on the Advanced Maintenance tab. Choose the Windows Updates to allow workstations to automatically install critical updates for Windows 2000/XP/Vista during the maintenance period via the Internet or an SUS server.
-
Page 18: Advanced Maintenance
Advanced Maintenance The Advanced Maintenance tab is used to specify SUS or WSUS server and batch file options for a Scheduled Maintenance period. Windows Update To use an SUS (Microsoft Software Update Services) or a WSUS (Windows Software Update Services) server for Windows critical updates, check Use SUS/WSUS Server and specify the server’s IP address or server name. -
Page 19: Miscellaneous
Miscellaneous The Miscellaneous tab is used to configure the network communications protocol that the Enterprise Console uses, as well as various security options. Network Communication between the Deep Freeze Enterprise Console and workstations with Deep Freeze installed can use two different modes: LAN Mode or LAN/WAN Mode. LAN: Check the LAN radio button to configure Deep Freeze to communicate within a Local Area Network (LAN). - Page 20 For more information on configuring and using Deep Freeze in a specific network environment, refer Appendix A—Network Examples or contact Technical Support. If a port number other than the default of 7725 is used, care should be taken to ensure that there are no conflicts with applications already running on the network.
-
Page 21: One Time Passwords Tab
One Time Passwords Tab The One Time Passwords tab is used to generate temporary passwords for Deep Freeze that expire at midnight on the day they were generated. A One Time Password (OTP) can be useful if, for example, a Deep Freeze password is forgotten or if a configuration file was created without any passwords defined. -
Page 22: Create Programs Tab
Create Programs Tab The Create Programs tab is used to create customized Deep Freeze installation program files with all of the options that were configured in the Configuration tab. Click the appropriate icon to create one of the following programs: • Full Workstation Installation file: used to install Deep Freeze on workstations using an Attended Install, the Silent Install System, or a Target Install. -
Page 23: Uninstalling The Configuration Administrator
Uninstalling the Configuration Administrator Complete the following steps to uninstall the Configuration Administrator: Open the Add/Remove Programs utility in the Windows Control Panel by selecting the following path from the Start menu: Start > Control Panel > Add or Remove Programs Select Deep Freeze Administrator - Enterprise and click the Change/Remove button. Follow the steps presented and the Configuration Administrator will be uninstalled from the computer. -
Page 24: Deep Freeze Enterprise Console
Create Programs tab. A standard Save As dialog displays. The default Save location for the console program is: C:\Program Files\Faronics\Deep Freeze 6 Enterprise\ Install Programs Activating the Enterprise Console As a security feature of Deep Freeze Enterprise, when the DF6Console.exe file is copied to a new workstation, the console must be activated. -
Page 25: Using The Enterprise Console
Using the Enterprise Console Launch the Enterprise Console by double-clicking the DF6Console.exe file created by the Configuration Administrator. Status Icons The Enterprise Console displays the status of the workstations on the local area network with the following icons beside or above the workstation name, depending on the view selected: Workstations that have the Deep Freeze Workstation Seed installed but do not have Deep Freeze installed;... -
Page 26: View Options
View Options The Enterprise Console has three view options: Icons, Details, and List. Use the View menu to select a preferred appearance. The View menu can also be used to view the log for selected workstations or to remove the selected workstation(s) from History. -
Page 27: Managing Deep Freeze With The Console
Managing Deep Freeze with the Console The Enterprise Console contains a toolbar at the top of the screen that allows quick access to the functions of the Console. These commands can also be accessed using the contextual menu, as shown below, that appears by right-clicking on a specific workstation. When a particular action is chosen, the selected workstation performs the action and the status icons update accordingly. -
Page 28: Updating Deep Freeze Software
Updating Deep Freeze Software To update Deep Freeze workstations with a new version of Deep Freeze, complete the following steps: In the Configuration Administrator of the new version of Deep Freeze, create a blank workstation installation file. In the console, select the workstations to be updated; these workstations can be in either a Frozen or Thawed state. -
Page 29: Target Installing Deep Freeze
Target Installing Deep Freeze Complete the following steps to remotely install a Full Workstation Installation on any workstation that has the Workstation Seed installed. 1. Right-click on one or multiple workstations and select Install, as shown below. 2. A dialog box appears, asking if the installation should proceed. Click OK. -
Page 30: Updating A Deep Freeze Configuration File
Updating a Deep Freeze Configuration File Complete the following steps to update the configuration on one or many workstation(s) with the settings of an existing .rdx file. Right-click on the workstation(s) and select Update Configuration, as shown below. A message appears asking for an existing .rdx file to be located. Click OK. -
Page 31: Dynamically Updating A Deep Freeze Configuration File
Dynamically Updating a Deep Freeze Configuration File Complete the following steps to dynamically update the configuration on a single or multiple workstations. Right-click on the workstation(s) and select Update Maintenance from the contextual menu. Or, select the desired workstation(s) and click the Update Maintenance icon in the toolbar. A red bar with six buttons appears at the bottom of the Workstations window. - Page 32 4. The three tabs on the Configuration Screen can be used to update the configuration on remote workstations. For further information about the options on each tab, refer to the sections in the Configuration Administrator documentation for Restart/Shutdown, Maintenance, and Advanced Maintenance.
-
Page 33: Scheduling Deep Freeze Tasks
Scheduling Deep Freeze Tasks To schedule a Deep Freeze task in the Enterprise Console using the Scheduled Task Wizard, complete the following steps: 1. Open the Scheduled Task Wizard in one of the following ways: • click Scheduler in the Network and Groups pane and click the Add Task icon •... - Page 34 Click Next. The following screen displays: Choose the preferred task execution schedule: Daily, Weekly, Monthly, or One time only. Click Next. The following screen displays: Select the start date and time that the task will execute on. NOTE: If the task is set to execute on a One time only basis, and the starting date is in the past, the task will not execute.
-
Page 35: Assigning Workstations To Scheduled Tasks
Click Next. The following screen displays: Click Finish to complete the task schedule. Assigning Workstations to Scheduled Tasks After a task has been scheduled, it appears under the Scheduler in the Network and Groups section of the console. To assign workstations to a task, select the preferred computers from the Workstations pane in the console and drag them onto the preferred task. -
Page 36: Deleting A Task
To delete a workstation from a task, click on the workstation and press Delete. Deleting a Task To delete a task, click on the task and press Delete. Scheduled Task Properties To see the properties of a task, right-click the task name and select View Properties. The following screen displays: The properties of a task cannot be changed after it has been created. -
Page 37: Managing Network And Groups
Managing Network and Groups The Enterprise Console automatically arranges workstations by their workgroup or domain. Click on the appropriate workgroup or domain to view the workstations in that workgroup or domain. The Enterprise Console can be used to define specific groups in order to arrange workstations. Adding a New Group To add a new group, complete the following steps: 1. -
Page 38: Importing Groups From Active Directory
Importing Groups from Active Directory If the group structure has already been designed within Active Directory, that structure can be imported directly into the console. To do this, right-click on User Defined Groups and choose Import user defined groups from Active Directory, or choose the option from the Tools menu. The Active Directory group with all its sub- groups appears under User Defined Groups. -
Page 39: Installing Deep Freeze
Installing Deep Freeze After a customized installation program file has been created using the Configuration Administrator, Deep Freeze can be deployed to workstations using an Attended Install, a Target Install, the Silent Install System, or as part of an imaging process. All background utilities and antivirus software should be disabled and all applications should be closed prior to installation. -
Page 40: Uninstalling Deep Freeze
Uninstalling Deep Freeze The Enterprise Console can be used to uninstall Deep Freeze completely or to uninstall Deep Freeze but leave the Workstation Seed. A workstation must be in a Thawed state in order to uninstall the program. To uninstall Deep Freeze on a workstation and leave the Workstation Seed, right-click on the Thawed workstation(s) and select Uninstall - Leave Seed, as shown above. -
Page 41: Silent Install Or Uninstall
Silent Install or Uninstall Deep Freeze can be rapidly installed to many workstations over a network using the Silent Install System. Any deployment utility that allows execution of a command line on a remote workstation can implement the Silent Install System. After the Silent Install is complete, the system immediately restarts. -
Page 42: Network Install On Multiple Workstations
Network Install on Multiple Workstations The Silent Install System can also be used to install Deep Freeze on multiple workstations over a network. If the workstations on the network use logon scripts, the scripts can be used to install Deep Freeze on all networked workstations automatically. All workstations will restart Frozen and ready for use after installation has completed. -
Page 43: Managing Deep Freeze Workstations
Managing Deep Freeze Workstations Workstation Logon Use one of the following ways to access Deep Freeze on a workstation. • If the Deep Freeze icon is shown in the System Tray, hold down the SHIFT key and double- click the Deep Freeze icon • Use the keyboard shortcut CTRL+SHIFT+ALT+F6 Either method brings up the logon dialog. -
Page 44: Network
Network The Network tab can be used to configure the network options on a workstation. To choose either the LAN or the LAN/WAN method of communication, click the preferred radio button. When the WAN radio button is selected, a valid IP address for the Enterprise Console must be entered in the Console IP field. -
Page 45: Thawspace
ThawSpace ThawSpace is a virtual partition on a workstation that can be used to store programs, save files, or make permanent changes. All files stored in the ThawSpace are saved after a restart, even if the workstation is Frozen. ThawSpace is only available if it was set to be created in the Deep Freeze Configuration Administrator. -
Page 46: Deep Freeze Command Line Control (Dfc.exe)
The DFC executable is installed in same directory as the Configuration Administrator: C:\Program Files\Faronics\Deep Freeze 6 Enterprise\DFC.exe DFC commands require a password with command line rights. OTPs cannot be used. Syntax Description Restarts workstation in a Thawed state;... -
Page 47: Dfc Return Values
DFC Return Values On completion of any DFC command, the DFC returns the following values: Value Description SUCCESS or Boolean FALSE, for commands returning a Boolean result Boolean TRUE ERROR - User does not have administrator rights ERROR - DFC command not valid on this installation ERROR - Invalid command ERROR - Internal error executing command 5 - *... -
Page 48: Update Mode
Update Mode can be used to automatically create updated versions of an existing installation set of Deep Freeze Enterprise by executing a special update command. The command automatically updates any or all of the following files that are present in the Faronics > Deep Freeze 6 Enterprise > Install Programs directory, including the following sub-directories: •... -
Page 49: Remote Administration
Remote Administration Remote Console A remote console is a small utility that runs on a remote machine and acts as a communications hub that other consoles can connect to in order to control and view Deep Freeze workstations. This utility is not used on its own. There are two components that incorporate this Remote Console utility: the Server Service and the Deep Freeze Enterprise Remote Control Enabled Console. -
Page 50: Differences Between Server Service And Rce Console
2. Click on the Create Programs tab. The following screen appears: 3. Click Create Server Manager to create the DF6ServerServiceManager.exe. A prompt to save the file follows. By default, the file is saved to ...\Program Files\Faronics\Deep Freeze 6 Enterprise\Install Programs. -
Page 51: Configuring The Server Service
Configuring the Server Service To set up the Server Service, complete the following steps : 1. Run DF6ServerServiceManager.exe on the machine where the service will be installed. The following dialog displays: 2. Click Add Port to add a port. The port used is the port the client machines will use. 3. -
Page 52: Configuring A Remote Control Enabled (Rce) Console
4. Click the Create Programs tab. 5. Click Create Enterprise Console to create the DF6Console.exe program. A prompt to save the file appears. By default, the file is saved to ...\Program Files\Faronics\ Deep Freeze 6 Enterprise\Install Programs. 6. Move the console program to the machine where it will be run. When the program is run, a prompt for a One Time Password appears. - Page 53 When the console is started, the following label appears at the footer of the screen indicating that remote control is disabled. The port that the console is currently using locally is also displayed. 8. Right-click on Remote Consoles and select Enable/Disable Remote Console Control. 9.
-
Page 54: Setting Up A Remote Console
4. Click the Create Programs tab. 5. Click Create Enterprise Console to create the DF6Console.exe program. A prompt to save the file appears. By default, the file is saved to ...\Program Files\Faronics\Deep Freeze 6 Enterprise\ Install Programs. 6. Move the console program to the machine where it will be run. When the program is run, a prompt for a One Time Password appears. -
Page 55: Connecting To A Remote Console
Connecting to a Remote Console The steps to connect to a Remote Console are identical, whether the Server Service or RCE console is used. To connect a console to a Remote Console, complete the following steps: 1. Open the Deep Freeze Enterprise Console. 2. Right-click on Remote Consoles and select Connect to Remote Console. 3. -
Page 56: Ports And Protocols Explained
Ports and Protocols Explained The key to setting up a Remote Console is knowing which ports to use. The important factor is knowing what ports are in use on the network and using ports that will not conflict with those. By default, Deep Freeze uses port 7725. -
Page 57: Appendix A: Network Examples
Appendix A: Network Examples The following examples show different scenarios involving either the server service manager or remote console. • Example 1 - Single Subnet One Console • Example 2 - Multiple Subnets One Console • Example 3 - Multiple Subnets Remote Control Enabled Console •... -
Page 58: Example 1 - Single Subnet
Example 1 - Single Subnet In this environment, all client machines are contained in the same subnet as the console machine. This environment does not require a remote console, although one could be used. In this example, the remote console is not used. This is the simplest networking environment. It is also the easiest to configure. -
Page 59: Example 2 - Multiple Subnets One Console
Example 2 - Multiple Subnets One Console In this environment, the clients are located across more than one subnet. There is still only one console being used. This environment does not require a remote console, although one could be used. The following diagram shows the network topology: Subnet 1 Subnet 2 In this scenario, both the clients and the console are using the same port. -
Page 60: Example 3 - Multiple Subnets Remote Control Enabled Console
Example - Multiple Subnets Remote Control Enabled Console In this environment the clients are again located across multiple subnets. In this case, more than one console is being used. There are two methods that allow multiple consoles to be used: a Server Service or a Remote Control Enabled (RCE) console. In this example, an RCE console is used. The following diagram shows the network topology: Subnet 1 Subnet 2... -
Page 61: Example 4 - Multiple Subnets Central Server Service
Example 4 - Multiple Subnets Central Server Service In this example, there are two locations. Both locations are connected to a third location by a WAN. Location 1 is administered locally and from the third location. Location 2 is also administered locally and from the third location. In order to prevent the administrator at Location 1 from having access to Location 2, the clients must be split up. -
Page 62: Example 5 - Multiple Subnets Multiple Server Services
Example - Multiple Subnets Multiple Server Services In this example, there are two separate locations. The following is a list of assumptions that are made regarding this particular example: • the locations are spread apart and have only a minimal connection to each other • there is a network administrator at each location who is responsible for looking after Deep Freeze at that location •... -
Page 63: Appendix B: Troubleshooting A Remote Console Connection
Appendix B: Troubleshooting a Remote Console Connection No Clients In the Console The following are some common reasons why clients fail to appear in the console. 1. Windows XP clients may have the XP firewall turned on. With SP1, the firewall must be turned off. With SP2, either the firewall must be turned off or the ports being used must be added to the Exceptions tab. -
Page 64: Port Is In Use Error When Starting The Console
Port is in Use Error When Starting the Console When attempting to start the console, the error message Unable to start console: Port is in use appears. There are several reasons why this error message may be appearing: 1. There is a Deep Freeze workstation or workstation seed installed under the same port as the console.